2017

Integer overflow in coders/icon.c in ImageMagick 6.9.1-3 and later allows remote attackers to cause a denial of service

When adding a private file via the editor in Drupal 8.2.x before 8.2.7, the editor will not correctly check access for t

Some administrative paths in Drupal 8.2.x before 8.2.7 did not include protection for CSRF. This would allow an attacker

Easy File Sharing FTP Server version 3.6 is vulnerable to a directory traversal vulnerability which allows an attacker t

A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling object

The Windows Graphics Component in Microsoft Office 2010 SP2; Windows Server 2008 R2 SP1; Windows 7 SP1; Windows 8.1; Win

A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling object

Microsoft Internet Explorer 10 and 11 allow remote attackers to execute arbitrary code or cause a denial of service (mem

The PDF library in Microsoft Edge; Windows 8.1; Windows Server 2012 and R2; Windows RT 8.1; and Windows 10, 1511, and 16

A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling object

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerabilit

A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling object

The scripting engine in Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or ca

A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling object

A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling object

A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling object

A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling object

Microsoft Lync for Mac 2011 fails to properly validate certificates, allowing remote attackers to alter server-client co

The scripting engine in Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or ca

A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling object

A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling object

A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling object

A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling object

A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling object

A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling object

A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling object

A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling object

The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows

A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling object

A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling object

An issue was discovered in apng2gif 1.7. There is an integer overflow resulting in a heap-based buffer over-read, relate

An issue was discovered in apng2gif 1.7. There is an integer overflow resulting in a heap-based buffer overflow. This is

Wonder CMS 2014 allows remote attackers to obtain sensitive information by viewing /files/password, which reveals the un

GetSimple CMS 3.3.4 allows remote attackers to obtain sensitive information via a direct request to (1) data/users/<user

coders/tiff.c in ImageMagick allows remote attackers to cause a denial of service (application crash) via vectors relate

Information disclosure issue in qdPM 8.3 allows remote attackers to obtain sensitive information via a direct request to

Suricata before 3.2.1 has an IPv4 defragmentation evasion issue caused by lack of a check for the IP protocol during fra

libpcre1 in PCRE 8.40 and libpcre2 in PCRE2 10.23 allow remote attackers to cause a denial of service (segmentation viol

Memory leak in the ReadPSDLayers function in coders/psd.c in ImageMagick 6.8.9.9 allows remote attackers to cause a deni

Memory leak in ImageMagick allows remote attackers to cause a denial of service (memory consumption).

The png coder in ImageMagick allows remote attackers to cause a denial of service (crash).

Logic error in ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (resource consumption).

ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (application crash).

The get_sessions servlet in CA Unified Infrastructure Management (formerly CA Nimsoft Monitor) before 8.5 and CA Unified

Buffer overflow in NetRxPkt::ehdr_buf in hw/net/net_rx_pkt.c in QEMU (aka Quick Emulator), when the VLANSTRIP feature is

saned in sane-backends 1.0.25 allows remote attackers to obtain sensitive memory information via a crafted SANE_NET_CONT

EMC RecoverPoint versions prior to 5.0 and EMC RecoverPoint for Virtual Machines versions prior to 5.0 have an SSL Strip

magick/colormap-private.h in ImageMagick 6.8.9-9 allows remote attackers to cause a denial of service (out-of-bounds acc

GNU assembler in GNU Binutils 2.28 is vulnerable to a global buffer overflow (of size 1) while attempting to unget an EO

The find_nearest_line function in addr2line in GNU Binutils 2.28 does not handle the case where the main file name and t